The following Fedora 28 Security updates need testing:
Age URL
390
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d510cfd7eb
jgraphx-3.6.0.0-6.fc28
340
https://bodhi.fedoraproject.org/updates/FEDORA-2018-d7aeaa74da
nodejs-brace-expansion-1.1.11-1.fc28
338
https://bodhi.fedoraproject.org/updates/FEDORA-2018-bc073fdc1a
nodejs-atob-2.1.1-1.fc28
214
https://bodhi.fedoraproject.org/updates/FEDORA-2018-cc4b7af297
xerces-c27-2.7.0-28.fc28
167
https://bodhi.fedoraproject.org/updates/FEDORA-2018-aa3752ac3c
nginx-1.14.1-1.fc28
146
https://bodhi.fedoraproject.org/updates/FEDORA-2018-cc86ef9e22 squid-4.4-1.fc28
73
https://bodhi.fedoraproject.org/updates/FEDORA-2019-86412405d5
bind-9.11.5-4.P4.fc28
60
https://bodhi.fedoraproject.org/updates/FEDORA-2019-63029a7692
libu2f-host-1.1.8-1.fc28
41
https://bodhi.fedoraproject.org/updates/FEDORA-2019-ba19e79e9a
thunderbird-60.6.1-1.fc28
38
https://bodhi.fedoraproject.org/updates/FEDORA-2019-0927602e59
chromium-73.0.3683.86-2.fc28
11
https://bodhi.fedoraproject.org/updates/FEDORA-2019-ca4ee3510d
java-11-openjdk-11.0.3.7-1.fc28
9
https://bodhi.fedoraproject.org/updates/FEDORA-2019-e2d5de3342 libqb-1.0.5-1.fc28
7
https://bodhi.fedoraproject.org/updates/FEDORA-2019-feac6674b7
ruby-2.5.5-108.fc28
7
https://bodhi.fedoraproject.org/updates/FEDORA-2019-9dfd44e1e9
python-gnupg-0.4.4-1.fc28
7
https://bodhi.fedoraproject.org/updates/FEDORA-2019-1a3edd7e8a
drupal8-8.6.15-1.fc28
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-d109db9c8a
libfilezilla-0.15.1-1.fc28 filezilla-3.41.2-1.fc28
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-f563e66380
drupal7-7.66-1.fc28
5
https://bodhi.fedoraproject.org/updates/FEDORA-2019-bab3944fee php-7.2.18-1.fc28
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-04e7d39ad3
community-mysql-5.7.26-1.fc28
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-a4ed7400f4
httpd-2.4.39-1.1.fc28
The following Fedora 28 Critical Path updates have yet to be approved:
Age URL
146
https://bodhi.fedoraproject.org/updates/FEDORA-2018-9f541b469b
nfs-utils-2.3.3-1.rc2.fc28
110
https://bodhi.fedoraproject.org/updates/FEDORA-2019-78153d357c
totem-pl-parser-3.26.2-1.fc28
102
https://bodhi.fedoraproject.org/updates/FEDORA-2019-bb30467485
ostree-2019.1-2.fc28 rpm-ostree-2019.1-1.fc28
94
https://bodhi.fedoraproject.org/updates/FEDORA-2019-cb4a3023ef
iproute-4.20.0-1.fc28
77
https://bodhi.fedoraproject.org/updates/FEDORA-2019-6c4e362bd0 dhcp-4.3.6-22.fc28
dnsperf-2.2.1-1.fc28 bind-dyndb-ldap-11.1-13.fc28 bind-9.11.5-2.P1.fc28
55
https://bodhi.fedoraproject.org/updates/FEDORA-2019-cb98bf5ace
fedfind-4.2.2-1.fc28 python-productmd-1.20-1.fc28
47
https://bodhi.fedoraproject.org/updates/FEDORA-2019-e60ecc03b4
python-productmd-1.21-1.fc28
41
https://bodhi.fedoraproject.org/updates/FEDORA-2019-ba19e79e9a
thunderbird-60.6.1-1.fc28
32
https://bodhi.fedoraproject.org/updates/FEDORA-2019-ba19af6a58
libldb-1.4.0-5.fc28.1.3.8 samba-4.8.10-0.fc28
18
https://bodhi.fedoraproject.org/updates/FEDORA-2019-bc14eac80e
libblockdev-2.18-2.fc28
12
https://bodhi.fedoraproject.org/updates/FEDORA-2019-9244c8b209
pungi-4.1.36-1.fc28
9
https://bodhi.fedoraproject.org/updates/FEDORA-2019-e2d5de3342 libqb-1.0.5-1.fc28
8
https://bodhi.fedoraproject.org/updates/FEDORA-2019-b3ab59df83 ethtool-5.0-1.fc28
6
https://bodhi.fedoraproject.org/updates/FEDORA-2019-c82d274716 dhcp-4.3.6-23.fc28
4
https://bodhi.fedoraproject.org/updates/FEDORA-2019-3ab1dba357
hwdata-0.323-1.fc28
3
https://bodhi.fedoraproject.org/updates/FEDORA-2019-44ac6082f0 fuse-2.9.9-7.fc28
2
https://bodhi.fedoraproject.org/updates/FEDORA-2019-472a7c38e8
osinfo-db-20190504-1.fc28
The following builds have been pushed to Fedora 28 updates-testing
fapolicyd-0.8.9-1.fc28
ibus-typing-booster-2.6.1-1.fc28
kernel-5.0.13-100.fc28
kernel-tools-5.0.12-100.fc28
kgb-bot-1.51-2.fc28
mozilla-https-everywhere-2019.5.6.1-1.fc28
mysql-connector-java-8.0.16-1.fc28
pcre2-10.33-2.fc28
php-sebastian-environment4-4.2.2-1.fc28
python-octave-kernel-0.30.2-1.fc28
scap-security-guide-0.1.44-1.fc28
Details about builds:
================================================================================
fapolicyd-0.8.9-1.fc28 (FEDORA-2019-3303ba7bfd)
Application Whitelisting Daemon
--------------------------------------------------------------------------------
Update Information:
New upstream release
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 6 2019 Radovan Sroka <rsroka(a)redhat.com> - 0.8.9-1
- New upstream release
--------------------------------------------------------------------------------
================================================================================
ibus-typing-booster-2.6.1-1.fc28 (FEDORA-2019-7936d1b040)
A completion input method
--------------------------------------------------------------------------------
Update Information:
Update to 2.6.1; Support emoji presentation and text presentation in emoji-
picker
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 4 2019 Mike FABIAN <mfabian(a)redhat.com> - 2.6.1-1
- Update to 2.6.1
- Support emoji presentation and text presentation in emoji-picker
- Improve itb_emoji.py to also support text presentation of emoji
- Update emoji annotations from CLDR
--------------------------------------------------------------------------------
================================================================================
kernel-5.0.13-100.fc28 (FEDORA-2019-f7dce25e9a)
The Linux kernel
--------------------------------------------------------------------------------
Update Information:
The 5.0.13 update contains a number of important fixes across the tree. There
is no kernel-headers build this time. The tools version is 5.0.12 because
originally it was built with the 5.0.12 kernel version but 5.0.13 was built
before 5.0.12 could be filed in bodhi.
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 6 2019 Laura Abbott <labbott(a)redhat.com> - 5.0.13-100
- Linux v5.0.13
* Sat May 4 2019 Laura Abbott <labbott(a)redhat.com> - 5.0.12-100
- Linux v5.0.12
--------------------------------------------------------------------------------
================================================================================
kernel-tools-5.0.12-100.fc28 (FEDORA-2019-f7dce25e9a)
Assortment of tools for the Linux kernel
--------------------------------------------------------------------------------
Update Information:
The 5.0.13 update contains a number of important fixes across the tree. There
is no kernel-headers build this time. The tools version is 5.0.12 because
originally it was built with the 5.0.12 kernel version but 5.0.13 was built
before 5.0.12 could be filed in bodhi.
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 4 2019 Laura Abbott <labbott(a)redhat.com> - 5.0.12-100
- Linux v5.0.12
--------------------------------------------------------------------------------
================================================================================
kgb-bot-1.51-2.fc28 (FEDORA-2019-104ec7aed6)
IRC Collaboration Bot
--------------------------------------------------------------------------------
Update Information:
Make sure /var/run/kgb-bot gets created and assigned correct permissions
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 6 2019 Andrea Veri <averi(a)fedoraproject.org> - 1.51-2
- Make sure /var/run/kgb-bot gets created and assigned correct permissions
--------------------------------------------------------------------------------
================================================================================
mozilla-https-everywhere-2019.5.6.1-1.fc28 (FEDORA-2019-d07fbc2ea6)
HTTPS enforcement extension for Mozilla Firefox
--------------------------------------------------------------------------------
Update Information:
Update to 2019.5.6.1. Check their changelog. There's a lot.
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 6 2019 Russell Golden <niveusluna(a)fedoraproject.org> - 2019.5.6.1-1
- UI changes in extension menu (#17854)
- EASE interstitial UI tweaks (#17347)
- Remove support for wildcard in the middle (#12319)
- Update default timestamp for deterministic builds (#17623)
- Refactor and enhance trivialize-cookie-rules.js (#17438)
- Run HSTS-prune and fix impacted rulesets (#17338)
- Update HSTS preload max age (#17564)
- Fix DeprecationWarning in HTTPS Everywhere Checker (#17596 )
- Fix Chromium local store exception (#17557)
- Remove middle wildcard support in rules.js (#17715)
- UI tweaks for spacing and font sizes
- Fix reload bug
- Patch for offline release channel
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1530067 - Description needs changing
https://bugzilla.redhat.com/show_bug.cgi?id=1530067
[ 2 ] Bug #1671591 - mozilla-https-everywhere-2019.5.2.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1671591
--------------------------------------------------------------------------------
================================================================================
mysql-connector-java-8.0.16-1.fc28 (FEDORA-2019-82ebe6bdbd)
Official JDBC driver for MySQL
--------------------------------------------------------------------------------
Update Information:
Version 8.0.16 - WL#12825, Remove third-party libraries from sources and
bundles. - Fix for Bug#93590 (29054329), javax.net.ssl.SSLException: closing
inbound before receiving peer's close_notify. - Fix for Bug#94414 (29384853),
Connector/J RPM package have version number in path. - Fix for Bug#27786499,
REDUNDANT FILES IN DEBIAN PACKAGE FOR DEBIAN9(COMMUNITY PACKAGE) FOR CJAVA. -
WL#12246, DevAPI: Prepared statement support. - WL#10839, Adjust c/J tests to
the new "ON" default for explicit_defaults_for_timestamp. - Fix for
Bug#29329326, PLEASE AVOID SHOW PROCESSLIST IF POSSIBLE. - WL#12460, DevAPI:
Support new session reset functionality. - WL#12459, DevAPI: Support
connection-attributes. - Fix for Bug#25650385, GETBYTE() RETURNS ERROR FOR
BINARY() FLD. - Fix for Bug#27784363, MYSQL 8.0 JDBC DRIVER THROWS
NUMBERFORMATEXCEPTION FOR TEXT DATA - Fix for Bug#93007 (28860051),
LoadBalancedConnectionProxy.getGlobalBlacklist bug. - Fix for Bug#29186870,
CONNECTOR/J REGRESSION: NOT RETURNING PRECISION GETPROCEDURECOLUMNS. - Fix
for Bug#22038729, X DEVAPI: ANY API CALL AFTER A FAILED CALL PROC() RESULTS IN
HANG. - Fix for Bug#29244101, ADD MAPPING FOR UTF8MB4_ZH_0900_AS_CS
COLLATION. - Fix for Bug#92819 (28834959), EXPRPARSER THROWS
WRONGARGUMENTEXCEPTION WHEN PARSING EMPTY JSON ARRAY. - Fix for Bug#21921956,
X DEVAPI: EXPRESSION PARSE ERROR WITH UNARY OPERATOR. - Fix for Bug#94031
(29257922), WRONG JSON_UNQUOTE WORKAROUND. - Fix for Bug#22931700,
BINDINGS.GETBOOLEAN() ALWAYS RETURNS FALSE. - Fix for Bug#25650912, ERROR
MESSAGE NOT CLEAR WHEN WE PASS A CHAR DATA TO ANY TABLE API. - Fix for
Bug#25642021, CHANGEUSER() FAILS WHEN ENABLEPACKETDEBUG=TRUE.
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 6 2019 Jakub Janco <jjanco(a)redhat.com> - 1:8.0.16-1
- new version
--------------------------------------------------------------------------------
================================================================================
pcre2-10.33-2.fc28 (FEDORA-2019-0c6a2c61f0)
Perl-compatible regular expression library
--------------------------------------------------------------------------------
Update Information:
This release valiades number of capturing parentheses in a regular expression.
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 6 2019 Petr Pisar <ppisar(a)redhat.com> - 10.33-2
- Validate number of capturing parentheses
--------------------------------------------------------------------------------
================================================================================
php-sebastian-environment4-4.2.2-1.fc28 (FEDORA-2019-5158923adf)
Handle HHVM/PHP environments
--------------------------------------------------------------------------------
Update Information:
**Version 4.2.2** - 2019-05-05 **Fixed** * Fixed
[#44](https://github.com/sebastianbergmann/environment/pull/44): `TypeError` in
`Console::getNumberOfColumnsInteractive()`
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 6 2019 Remi Collet <remi(a)remirepo.net> - 4.2.2-1
- update to 4.2.2
--------------------------------------------------------------------------------
================================================================================
python-octave-kernel-0.30.2-1.fc28 (FEDORA-2019-d26b32c8ee)
A Jupyter kernel for Octave
--------------------------------------------------------------------------------
Update Information:
Update to latest version
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 6 2019 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 0.30.2-1
- Update to latest version
* Tue Apr 30 2019 Elliott Sales de Andrade <quantum.analyst(a)gmail.com> - 0.29.0-1
- Update to latest version
* Sat Feb 2 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.28.4-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1704707 - python-octave-kernel-0.29.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1704707
[ 2 ] Bug #1705067 - python-octave-kernel-0.30.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1705067
--------------------------------------------------------------------------------
================================================================================
scap-security-guide-0.1.44-1.fc28 (FEDORA-2019-43873f5398)
Security guidance and baselines in SCAP formats
--------------------------------------------------------------------------------
Update Information:
Update to latest upstream SCAP-Security-Guide-0.1.44 release:
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 6 2019 Watson Yuuma Sato <wsato(a)redhat.com> - 0.1.44-1
- Update to latest upstream SCAP-Security-Guide-0.1.44 release:
https://github.com/ComplianceAsCode/content/releases/tag/v0.1.44
--------------------------------------------------------------------------------